CVE-2019-12172

Typora 0.9.9.21.1 1913 allows arbitrary code execution via a modified file: URL syntax in the HREF attribute of an AREA element, as demonstrated by file:\\\ on macOS or Linux, or file://C| on Windows. This is different from CVE-2019-12137...

CVE-2019-12172

creationtimestamp| type| source ---|---|--- 2019-05-17 23:47:08+00:00| seen| https://t.me/cvemitreorg/72...

CVE-2019-12172

Typora 0.9.9.21.1 1913 allows arbitrary code execution via a modified file: URL syntax in the HREF attribute of an AREA element, as demonstrated by file:\\ on macOS or Linux, or file://C| on Windows. This is different from CVE-2019-12137...

CVE-2019-12172

CVE-2019-12172 concerns Typora 0.9.9.21.1 (1913) where an arbitrary code execution is possible via a modified file: URL syntax in the HREF attribute of an AREA element, demonstrated with file:\ on macOS/Linux or file://C| on Windows. Red Hat entries corroborate Typora impact for the same version ...